Logicube Falcon-NEO User Manual page 141

Q. What operating system does Falcon-NEO use?
A. Falcon-NEO uses a Linux-based operating system. A Linux-based operating system provides
increased stability and security over Windows-based systems.
Q. What file format does Falcon-NEO use when formatting destination drives?
A. Falcon-NEO can format destination drives using the following file systems: EXT4, NTFS, exFAT,
or FAT32.
Q. Does imaging performance slow down when multiple drives are imaged at the same time?
A. Performance is limited by the slowest drive in the configuration, however, there should not be
any significant speed penalty when imaging multiple drives.
Q. Can I encrypt my evidence drives using the Falcon-NEO? How do I decrypt drives encrypted
with Falcon-NEO?
A. The Falcon-NEO provides AES 256 whole drive encryption. Users can choose between three
different cipher modes and can set their own password/key for the encrypted drive. Users can
decrypt a drive that was encrypted with Falcon-NEO by using the Falcon-NEO to decrypt or
by using VeraCrypt, TrueCrypt or FreeOTFE.
Q. Does the Falcon-NEO provide log files?
A. Yes, each operation/task produces a log file. The log file is viewable on the Falcon-NEO
screen (or remotely on a PC) in an HTML format. The log files can be exported to a thumb
drive (the Falcon-NEO will export in XML, HTML and PDF). XML log files can be customized
using XML editors. The log files are stored on the internal hard drive within Falcon-NEO and
are accessible by pressing the log file icon from the left-side navigation bar on the Falcon-
NEO screen.
Q. If I am imaging to or from USB enclosures, will the Falcon-NEO's USB ports power my devices,
or will an additional power source be required?
A. Each of the Falcon-NEO's USB ports meets the standard specification of up to 5V of power. If
your USB device has higher power requirements an external power source will be necessary.
Check with the manufacturer of your USB device to determine the exact power requirements.
Q. Can the Falcon-NEO image to or from a network destination?
A. Yes. The Falcon-NEO includes two 10GbE (Gigabit Ethernet) network connections. Users can
designate a network share as a source or destination repository using SMB, CIFS, or iSCSI
protocols.
Q. What is "Parallel Imaging"?
A. Parallel Imaging allows you to image from the same source drive to multiple destinations
using different imaging formats. For example, an image to one Destination can be performed
using E01 and at the same time, image to another Destination drive using Mirror Image (bit-
for-bit). This is useful when there are multiple teams of investigators (one in a lab and one at
Logicube Falcon -Neo User's Manual
®
FAQs
132